Fluent Bit: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Medium 5.5
  CVE-2025-29477

  An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

  fluent-bit Azure Linux
  Apr 4, 2025
• Medium 5.5
  CVE-2025-29478

  An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h…

  fluent-bit Azure Linux
  Apr 7, 2025

Revision history

1. 2025-04-07 #1

   Initiale Fassung

References

• NIST Vulnerability Database vom 2025-04-07
  https://nvd.nist.gov/vuln/detail/CVE-2025-29477
• NIST Vulnerability Database vom 2025-04-07
  https://nvd.nist.gov/vuln/detail/CVE-2025-29478
• GitHub Advisory Database vom 2025-04-07
  https://github.com/advisories/GHSA-8h3v-hh74-r7p2
• GitHub Advisory Database vom 2025-04-07
  https://github.com/advisories/GHSA-57cc-74xg-cqvg
• PoC auf GitHub vom 2025-04-07
  https://github.com/lmarch2/poc/blob/main/fluent-bit/fluent-bit.md